Update Notes

curl -X PUT \
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911' \
  -H 'Authorization: Bearer your_jwt_token_here' \
  -H 'Content-Type: application/json' \
  -d '{
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment"
  }'

const response = await fetch(
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
  {
    method: 'PUT',
    headers: {
      'Authorization': 'Bearer your_jwt_token_here',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      notes: 'Updated notes: symptoms improved, EKG normal, continue treatment.',
      summary: 'Improved symptoms, normal EKG, continue treatment'
    })
  }
);

const result = await response.json();

import requests

response = requests.put(
    'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
    headers={
        'Authorization': 'Bearer your_jwt_token_here',
        'Content-Type': 'application/json'
    },
    json={
        'notes': 'Updated notes: symptoms improved, EKG normal, continue treatment.',
        'summary': 'Improved symptoms, normal EKG, continue treatment'
    }
)

result = response.json()

{
  "success": true,
  "data": {
    "_id": "665f1c2a9b1e8a0012ab34cd",
    "appointment_id": "664e0b1f7c2a5e0011fa9911",
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment",
    "citations": null,
    "createdAt": "2026-06-30T10:30:00.000Z",
    "updatedAt": "2026-06-30T14:20:00.000Z"
  }
}

PUT

notes

{id}

curl -X PUT \
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911' \
  -H 'Authorization: Bearer your_jwt_token_here' \
  -H 'Content-Type: application/json' \
  -d '{
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment"
  }'

const response = await fetch(
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
  {
    method: 'PUT',
    headers: {
      'Authorization': 'Bearer your_jwt_token_here',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      notes: 'Updated notes: symptoms improved, EKG normal, continue treatment.',
      summary: 'Improved symptoms, normal EKG, continue treatment'
    })
  }
);

const result = await response.json();

import requests

response = requests.put(
    'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
    headers={
        'Authorization': 'Bearer your_jwt_token_here',
        'Content-Type': 'application/json'
    },
    json={
        'notes': 'Updated notes: symptoms improved, EKG normal, continue treatment.',
        'summary': 'Improved symptoms, normal EKG, continue treatment'
    }
)

result = response.json()

{
  "success": true,
  "data": {
    "_id": "665f1c2a9b1e8a0012ab34cd",
    "appointment_id": "664e0b1f7c2a5e0011fa9911",
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment",
    "citations": null,
    "createdAt": "2026-06-30T10:30:00.000Z",
    "updatedAt": "2026-06-30T14:20:00.000Z"
  }
}

Overview

Update the notes for a specific appointment. The endpoint locates the appointment by ID, then updates the notes document associated with it. All body fields are optional.

This operation is scoped to the owning doctor. The appointment identified by {id} must belong to the authenticated user. A request for an appointment you do not own returns 403 Forbidden, an unknown appointment returns 404 Appointment not found, and an appointment that has no notes yet returns 404 Notes not found.

Authentication

string

required

Bearer token for authenticated access. The doctor (user) identity is taken from the JWT.

Authorization: Bearer your_jwt_token_here

A missing or invalid token returns 401 with a message field. See Error Responses.

Path Parameters

string

required

Appointment ID (MongoDB ObjectId, 24 hex characters) whose notes to update. Must be owned by the authenticated doctor.

Body Parameters

string

Notes content to set. Omitting the field (or sending an empty string) keeps the existing value — an empty value does not clear the field. Markdown asterisks are stripped server-side before storage.

string

Summary to set. Omitting the field (or sending an empty string) keeps the existing value.

string

Optional override for the stored appointment_id. Keeps the existing value when omitted.

Response

boolean

Indicates whether the operation succeeded.

object

The updated notes document.

Show data properties

string

Unique identifier for the notes document (MongoDB ObjectId).

string

The appointment ID these notes belong to.

string

The clinical notes content.

string

Summary of the notes.

array

Citation objects, or null when none are present.

string

ISO 8601 timestamp when the notes were created.

string

ISO 8601 timestamp when the notes were last updated.

string

Error message (only present when success is false).

The data object is the full saved notes document and may contain additional fields beyond those listed above. Treat any unlisted fields as opaque.

Example Request

curl -X PUT \
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911' \
  -H 'Authorization: Bearer your_jwt_token_here' \
  -H 'Content-Type: application/json' \
  -d '{
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment"
  }'

const response = await fetch(
  'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
  {
    method: 'PUT',
    headers: {
      'Authorization': 'Bearer your_jwt_token_here',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      notes: 'Updated notes: symptoms improved, EKG normal, continue treatment.',
      summary: 'Improved symptoms, normal EKG, continue treatment'
    })
  }
);

const result = await response.json();

import requests

response = requests.put(
    'https://app.medisync.me/api/notes/664e0b1f7c2a5e0011fa9911',
    headers={
        'Authorization': 'Bearer your_jwt_token_here',
        'Content-Type': 'application/json'
    },
    json={
        'notes': 'Updated notes: symptoms improved, EKG normal, continue treatment.',
        'summary': 'Improved symptoms, normal EKG, continue treatment'
    }
)

result = response.json()

Example Response

{
  "success": true,
  "data": {
    "_id": "665f1c2a9b1e8a0012ab34cd",
    "appointment_id": "664e0b1f7c2a5e0011fa9911",
    "notes": "Updated notes: symptoms improved, EKG normal, continue treatment.",
    "summary": "Improved symptoms, normal EKG, continue treatment",
    "citations": null,
    "createdAt": "2026-06-30T10:30:00.000Z",
    "updatedAt": "2026-06-30T14:20:00.000Z"
  }
}

Error Responses

{
  "success": false,
  "message": "Unauthorized"
}

{
  "success": false,
  "message": "Session ended on this device because you signed in elsewhere.",
  "code": "SESSION_REVOKED"
}

{
  "success": false,
  "error": "Forbidden"
}

{
  "success": false,
  "error": "Appointment not found"
}

{
  "success": false,
  "error": "Notes not found"
}

Behavior Notes

Two-step lookup: The endpoint first finds the appointment, then the notes document associated with it.
Partial updates: Only provided fields are updated. Omitting a field — or sending an empty string for notes/summary — preserves the existing value.
Asterisk stripping: Markdown asterisks are removed from notes before storage.
Timestamps: updatedAt is set automatically when the notes are saved.

Status Codes

200 — Notes updated successfully.
400 — Save failure.
401 — Missing, invalid, or revoked authentication token.
403 — Authenticated user does not own the appointment.
404 — Appointment not found, or no notes exist for the appointment.

Getting Started

API Reference

Authentication

User

Appointments

Recordings

Transcriptions

Notes

Documents

Overview

Authentication

Path Parameters

Body Parameters

Response

Example Request

Example Response

Error Responses

Behavior Notes

Status Codes

​Overview

​Authentication

​Path Parameters

​Body Parameters

​Response

​Example Request

​Example Response

​Error Responses

​Behavior Notes

​Status Codes

Overview

Authentication

Path Parameters

Body Parameters

Response

Example Request

Example Response

Error Responses

Behavior Notes

Status Codes